How to set app_metadata for all identity providers

[chrisj2]

I have a multi-tenanted SaaS application, and so when a new user is signed up I need to attach the correct Tenant ID to that user.

The app_metadata seems to be the right place to put this, but how can I integrate the code to do so?

Example - User 1 from Tenant A invites a new user (User 2) to join them in their tenant. This sends an invite email to User 2 with a link they can click to sign-up.

Question 1: This link could include the Tenant ID but how would I get Auth0 to read it in as part of the registration page?

Then let’s suppose User B clicks the link, and selects to Login With Facebook.

Question 2: How do I attach the Tenant ID to the app_metadata of the new user at this point?
It seems like the Pre Registration Hook would be the way to do this but the docs say it is only supported for database connections, not for social identity providers?

[dan.woda]

Hi @chrisj2,

Can you try passing a querystring param to rules and update the metadata there?

Here are some examples and considerations:

Context.request.query with Universal login

Using Lock I can pass a value to Auth0 Rules using a property on the params object like this: var lockAuthOptions = { redirectUrl: "https://example.com", responseType: 'token id_token', params: { audience: 'http://myaudience', myproperty: "hello rule!!" } } and access it in a rule like this: function (user, context, callback) { var value = context.request.query.myproperty; return callback(null, user, context); } How do I accompl…

Custom parameter in Rules from Hosted login page

I understand the Hosted login page would be able to retrieve query parameters that are passed to auth0’s /authorize endpoint. I wonder if these parameters can somehow be passed to Rules after a successful authentication and authorization. I am missing this link to authorize a user based on a given “custom attribute”. This custom attribute will helps us to derive the user’s permissions in rules. I want to be able to pass on the custom attribute from Hosted Login Page as a parameter to /authorize…

Hope this helps!

Thanks,
Dan